Trezor Safe 7: review, security and first setup

Launched in October 2025, Trezor Safe 7 is the flagship of the Trezor lineup, which also includes Safe 5 and Safe 3. It is the first Trezor with Bluetooth, a battery and full iPhone support, and the first hardware wallet to use the TROPIC01 security chip, whose architecture is open to independent review.

A hardware vulnerability was discovered in TROPIC01 in January 2026 and publicly disclosed in June. In this Trezor Safe 7 review, we explain what it means for wallet owners, how Bluetooth and post-quantum protection work, and which coins and networks the device supports. We then use our own test device to walk through desktop setup: connecting it, installing firmware, creating a wallet, recording the backup and setting a PIN. After that, we add networks, display a receiving address and set up a separate passphrase wallet.

Who is Safe 7 for?

Safe 7 suits users who want to manage crypto from a computer or phone, including signing transactions from an iPhone over Bluetooth. Its battery lets you work without a cable, while the large touchscreen makes it easy to check addresses, amounts and DeFi transaction details. If you prefer a wired connection, you can use USB-C with a computer or compatible Android phone.

If you are still choosing a model, our separate article “Which Trezor to choose: Safe 3, Safe 5 or Safe 7?” compares their screens, connectivity and security. Here, we focus on Safe 7 and how to set it up.

Which coins and networks does Trezor Safe 7 support?

With its multi-coin firmware, Trezor Safe 7 supports thousands of coins and tokens. Trezor Suite lets you manage Bitcoin (BTC), Ethereum (ETH), Solana (SOL), Cardano (ADA), XRP, Litecoin (LTC) and Dogecoin (DOGE), along with tokens on supported networks.

TRON (TRX) and TRC-20 tokens, including USDT, are already supported in Trezor Suite on Safe 7. Since the June 2026 update, TRON has been generally available in both the desktop and mobile versions of Suite. The app does not support the older TRC-10 token standard.

When transferring USDT, make sure the sending and receiving networks match. For USDT TRC-20, for example, add a TRON account in Suite and select TRON as the withdrawal network on your exchange. TRC-20 transfers consume the network’s bandwidth and energy resources; if you do not have enough, fees are paid in TRX, so holding USDT alone may not be sufficient. See Trezor’s TRON and TRC-20 guide for the full procedure.

For other assets, check the official list of supported coins and tokens, selecting Safe 7 and the network you need. The list also tells you whether an asset is available in Trezor Suite or requires a compatible third-party app. Support for a token on one network does not mean every network where that token exists is supported.

Inside Safe 7: three chips from three manufacturers

Safe 7 contains three chips: an STM32U5G microcontroller (ARM Cortex-M33, 160 MHz), a third-generation Infineon OPTIGA Trust M Secure Element with CC EAL6+ certification, and TROPIC01 from Czech company Tropic Square. Components from three manufacturers provide independent layers of protection, so compromising one chip should not be enough to access the wallet.

In Safe 7, TROPIC01 enforces the PIN attempt limit in hardware through a mechanism called MAC-and-Destroy: each attempt permanently consumes a one-time slot in the chip, and only the correct PIN produces the required cryptographic result. The chip also stores factory certificates used to authenticate the device and generates random data for wallet creation.

The seed, from which the wallet derives private keys, is stored in encrypted form in the microcontroller’s memory. Its decryption key is never stored in full: after you enter the correct PIN, it is derived from secret data held by several chips, exists briefly in memory, and is then erased. As a result, compromising a single component is not enough to read the seed.

TROPIC01 has an open architecture that independent researchers can inspect. With many Secure Elements, access to technical details is restricted by nondisclosure agreements (NDAs). OPTIGA Trust M documentation is available without an NDA, although the chip itself does not have a fully open architecture. TROPIC01 was designed for open security audits, one of which uncovered the vulnerability discussed below.

The TROPIC01 vulnerability: what was compromised and what it means for security

Tropic Square commissioned an independent audit of TROPIC01 by Ledger Donjon, the security research team at Trezor’s competitor. In late January 2026, Donjon reported that laser fault injection had allowed it to extract some of the secret data protected by the chip. Building on those findings, Tropic Square engineers found a way to run their own firmware on the chip and obtain a secret used in PIN protection. Trezor published its response on June 3, 2026.

The attack requires physical access to the device, expensive laboratory equipment and specialist knowledge. An attacker must disassemble the wallet, desolder TROPIC01, open the chip package from the back, connect it to a custom board and precisely position the laser. This vulnerability cannot be exploited remotely or through malware on your computer. Trezor also states that it cannot be used to make a counterfeit Safe 7 with malicious firmware that survives a restart, ruling out that route for a supply-chain attack.

According to Trezor, compromising TROPIC01 alone does not give an attacker access to the PIN, funds or wallet backup: the seed is not stored on that chip, and decrypting it requires two other independent layers of protection. A Safe 7 firmware update cannot fully fix the underlying hardware issue. Tropic Square plans to release a revised chip in late 2026, but Trezor has not confirmed whether or when it will use that revision in new Safe 7 devices.

For everyday use, the main risks to watch for are phishing, exposure of your wallet backup and approving malicious transactions. If an attacker with a well-equipped laboratory is a realistic concern for you, factor in the vulnerability in one of the three protection layers: even after compromising TROPIC01, they would still have to defeat OPTIGA and the microcontroller. A strong passphrase provides additional protection when used alongside your backup and stored separately. It is not saved in the device’s persistent memory and is required to access the hidden wallet even if someone has the seed.

Quantum-ready: what is protected?

When Trezor describes Safe 7 as “quantum-ready,” it means post-quantum protection for the boot process, firmware and device authentication. Safe 7 verifies bootloader and firmware signatures using SLH-DSA-128, an algorithm standardized in 2024. Since May 2026, authentication in Trezor Suite has also used a digital signature generated by the microcontroller with the post-quantum algorithm ML-DSA-44. These measures protect against future attacks in which a quantum computer could help forge a conventional digital signature for an update or a device.

The cryptography used for addresses and transaction signatures on Bitcoin, Ethereum and other networks remains unchanged, so these features do not make your coins quantum-resistant. A move to post-quantum cryptography depends on the blockchains themselves; whether Safe 7 could support it through an update will depend on future standards and the device’s resources. When choosing Safe 7 today, consider its screen, connectivity and ease of use: “quantum-ready” describes protection for the device itself.

Bluetooth and connection security

On Safe 7, Bluetooth and USB connections are secured by Trezor Host Protocol (THP), an open-source protocol that encrypts commands and data and protects against interception, tampering and message injection. The Bluetooth pairing code and the one-time security code serve different purposes. You compare the first on both screens during Bluetooth pairing; Safe 7 displays the second for you to enter in Suite, including when connected by cable. In our walkthrough, the one-time code appeared before the firmware update, and we confirmed the connection again on the device after it restarted.

If you do not need a wireless connection, you can disable Bluetooth in the settings and use USB-C. You will then be unable to sign transactions from an iPhone, because Safe 7 uses Bluetooth exclusively for this; its USB-C port only supplies power when connected to an iPhone.

Whichever connection you use, always check the recipient address and amount on Safe 7’s screen, as malware on a computer or phone can replace a copied address in the clipboard. The 2.5-inch display makes long addresses and transaction details easy to read. In September 2026, Trezor introduced Clear Signing for supported contracts on EVM networks, which are compatible with the Ethereum Virtual Machine. When a contract is supported, the device displays a readable description of the action; for other contracts, Suite warns you about blind signing.

Case, battery and water resistance

Safe 7’s case is machined from a solid block of anodized aluminum, with Gorilla Glass 3 protecting the screen and a glass rear panel. It measures 75.4 × 44.5 × 8.3 mm and weighs 45 g.

Safe 7 has an IP54 rating, providing limited dust protection and resistance to splashes from any direction. Do not submerge the device. If a review or older article cites IP67, use the IP54 rating in Trezor’s current documentation as your reference.

The LiFePO₄ (lithium iron phosphate) battery has a capacity of 330 mAh. According to Trezor, it can withstand up to four times as many charge cycles as conventional lithium batteries. It also tolerates a full discharge and retains its charge during long periods of storage. You can charge Safe 7 by cable or with a Qi2-compatible wireless charger. If the battery eventually fails, the wallet will still run on USB-C power and can continue to work with a computer or Android phone. Connecting to an iPhone requires Bluetooth.

The operating temperature range is 0 to +45 °C. If you leave Safe 7 in a freezing car overnight, let it warm to room temperature before using it. Airport X-ray screening does not harm the device.

Where to buy Safe 7 in Ukraine

We sell the multi-coin version of Trezor Safe 7 with delivery across Ukraine, a 12-month warranty and help with setup.

If you choose another seller, check that they appear on Trezor’s official reseller list and inspect the device when it arrives. When ordering from trezor.io, allow for international shipping and any applicable customs charges.

Avoid used or repackaged devices and offers with no verifiable origin, including listings on OLX and other marketplaces. A hardware wallet’s supply history matters even if it looks new.

What to check when your device arrives

Before connecting it for the first time, inspect the device and box contents, whether you bought directly from trezor.io or from a reseller. If you notice signs of tampering or anything that differs from the official description, contact the seller before starting setup.

• The box is intact, with no signs of opening or resealing.
• The holographic seal over the USB-C port is present and undamaged. Removing it may leave a “VOID” mark, though this does not always remain on Safe 7’s aluminum case. If there is already a mark underneath the seal on a new device, or signs that the seal has been reapplied, it may have been removed before you received it.
• The screen has its protective film in place.
• The box contains the device, a USB-C → USB-C cable, two blank 20-word backup cards, the Get started guide, a security leaflet and stickers.
• On its first connection, the device prompts you to install firmware and passes the authenticity check in Trezor Suite.

Setting up Trezor Safe 7 on a computer: from Suite to your PIN

We recommend using a computer for your first setup: the larger screen makes it easier to read Suite’s explanations while confirming actions on your Trezor. This is how we set up Safe 7 for this guide, using the desktop version of Trezor Suite and a USB-C cable. Button labels match the English interface shown in our screenshots.

Have your wallet, the included cable, a pen and a blank backup card ready. Below, we create a new wallet with a 20-word Single-share Backup. If you want to restore an existing wallet, complete the authenticity check, then choose recovery and follow the instructions near the end of the article.

Step 1. Install Trezor Suite

1. Open trezor.io/start and click Download for desktop. Download the version for your operating system, install the app and launch it.
2. On the welcome screen, choose whether to enable Allow anonymous data collection to share anonymous diagnostic data. This is optional and separate from your wallet’s security settings.

Connect Safe 7 to your computer with a USB-C cable that supports data transfer. If Suite displays Connect & unlock your Trezor, click Connect and select the cable connection.

Step 2. Allow the connection and enter the one-time code

1. When Suite displays Securely connect with your Trezor and Confirm on Trezor, look at Safe 7’s screen. It will ask whether to allow Trezor Suite on your computer to connect to the device.
2. Check the computer name in the prompt, then tap Confirm on Trezor. Our example shows ROGSTRIX; yours will show your computer’s name.
3. On the Enter the one-time security code screen, enter the six digits currently displayed on Safe 7 into Suite. This is a one-time code for the secure connection, not your PIN or a Bluetooth pairing code. This prompt can also appear when you connect by cable.

If the setup wizard displays Device security check, check that your seller, packaging and seal meet the conditions shown, then click Set up my Trezor. Continue to firmware installation.

Step 3. Install firmware and confirm on Trezor

1. At the Install firmware stage in Suite, choose Universal for Bitcoin and other cryptocurrencies. Bitcoin-only firmware supports Bitcoin alone.
2. Click Install firmware. When Suite displays Update your Trezor’s firmware and asks for confirmation on the device, check the version and the by Trezor label on Safe 7, then tap Confirm.

Keep Suite open and leave the cable connected until installation and the restart are complete. Your version number may differ: use the current firmware offered by the official Suite app.

The multi-coin version of Safe 7 lets you choose Bitcoin-only firmware during setup. Switching firmware types later wipes the device, so check your backup and, if you use a hidden wallet, your written passphrase before switching.

Step 4. Confirm the secure connection after the restart

1. After installing firmware, click Continue on Suite’s Create a secure connection screen.
2. Safe 7 will display a Connection dialog asking whether to allow Trezor Suite on your computer to connect. Check the computer name and tap Confirm.
3. If Suite asks for another one-time code, enter the new code shown on Trezor. Once Suite accepts the confirmation, continue to the authenticity check.

Step 5. Check that your device is genuine

1. Click Start on the Let’s check your device screen. Wait for Suite to check the device and respond to any prompts that appear on Safe 7.
2. A successful check displays Your Trezor is genuine. Click Continue. If the check fails, stop and contact support. Do not disable protection to bypass it.

If the Know your Trezor tutorial appears, complete it on the device to learn the touchscreen controls. Then continue to wallet selection.

Step 6. Create a new wallet

1. On the selection screen, click Create a new wallet. The adjacent Recover a wallet option is for restoring from an existing backup.
2. On the Wallet backup type screen, keep the default Single-share Backup selected: one list of 20 words using the SLIP39 standard.

Confirm your choice with Create wallet. Read the terms on Safe 7, then press and hold on the device’s screen to create the wallet. When it confirms that the wallet has been created, tap Continue.

Multi-share Backup is an option if you want to distribute your backup across several locations. It creates distinct shares and lets you choose how many are needed for recovery. We did not select it for this walkthrough. Two paper copies of the same 20 words are still copies of a Single-share Backup, not a Multi-share Backup. Older BIP39 formats with 12 or 24 words are available under Legacy wallet backup types.

Step 7. Write down all 20 backup words

1. In Suite, select Continue to wallet backup, read the instructions and confirm that you understand them. Start the backup process.
2. When Suite displays Create wallet backup and Confirm on Trezor, the device will show Back up your new wallet now. Tap Continue on Safe 7 and work through its warnings.
3. Safe 7 will start displaying words. Write down all 20 words in the exact order, numbered 1 to 20. Use the arrows to move between them and go back if you need to check the spelling.

At the final word, make sure you have recorded the entire list, then tap Continue on Trezor. The first and last words in our photos illustrate the screen layout; your words will be different.

When choosing a metal backup, check that it supports a 20-word SLIP39 backup. For example, the 24-word Trezor Keep Metal is designed for a 24-word BIP39 backup and does not support the format selected here.

Step 8. Confirm the requested backup words

1. Safe 7 will display Let’s do a quick check of your backup. Tap Continue.
2. The device will ask you to select a word at a particular position, for example Select word 6 from your wallet backup. Find that number in your written list and tap the matching word on Trezor’s screen.
3. Repeat this for every requested position. Choose the words from your own backup, not the illustration.
4. A successful check ends with Done / Wallet backup completed. Tap Continue. Suite will display Wallet backup created successfully and offer to continue to PIN setup.

This quick check covers only selected words. Before transferring a significant amount, also run the full Check backup procedure described below. It verifies your entire written list without resetting the device.

Step 9. Set a PIN on Safe 7

1. Click Continue to PIN in Suite. If the wizard shows a separate screen with a Set PIN button, select it to begin.
2. On the Enter new PIN screen, enter your PIN on Trezor itself. You can use 4 to 50 digits; we recommend at least six random digits, avoiding dates and simple sequences.
3. Confirm your entry on the device, then enter the same PIN again when prompted. The digits change positions on the keypad, so read them rather than relying on where they were before.
4. Wait for confirmation that the PIN has been set. It protects access to Safe 7 but does not replace the backup needed for recovery.

Step 10. Finish setup and open the Dashboard

1. On the You’re all set screen, click Go to Dashboard. Your wallet is now created, its backup is recorded and the PIN is set.
2. On the Start using your wallet screen, click Get started. Suite will offer to add the networks you want to use.

We completed these steps in the desktop version of Suite. See the official Safe 7 setup guide for additional information about connection options.

How to add coins and get a receiving address in Trezor Suite

First, we will enable the networks we need, then open an account and display its receiving address. An account in Suite groups the addresses, balance and transaction history for a particular network. Your coins are held on the blockchain; adding an account lets you manage them in the app.

Step 11. Enable the networks you need

1. In the Add your networks window that opens after Get started, turn on the toggles beside the networks you want to use. Our example includes Bitcoin, Ethereum and several other networks; you only need to select the ones you intend to use.
2. Scroll down if the network you need is not visible. Once you have made your selection, click Confirm.
3. Wait for the accounts to load. They will appear under Accounts on the left, for example Bitcoin #1 and Ethereum #1. A zero balance is expected if you have not received any funds yet.

You can enable more networks later through Settings → Networks or add them from the accounts sidebar. You do not need a separate backup for each coin: all accounts in this wallet can be restored from the same backup. With Bitcoin-only firmware, only Bitcoin is available.

Step 12. Open an account and select Receive

1. In the Accounts sidebar, select an account on the network you need. We use Bitcoin #1 as the example.
2. Check that the heading shows the correct account, then click Receive at the top right. An empty Bitcoin account may also show a Receive BTC button in the center of the window.
3. Suite will open the receiving screen for that account. The address belongs to your current wallet. If you later open a passphrase wallet, it will have different addresses.

Step 13. Display your address and verify it on Trezor

1. On the Receive BTC screen, Suite shows your address and its QR code. Copy copies the address, while Verify lets you check it on Safe 7.
2. Click Verify and compare the entire address on Trezor’s screen with the address in Suite. Confirm the check on the device if prompted.
3. When funding your wallet, copy your own address into the withdrawal form on an exchange or the send form in another wallet. Also compare the address already pasted into the sender’s form with the one on Safe 7: malware can replace an address during copying.
4. Check the withdrawal network: it must match the account’s network in Suite. Send a small test amount first and wait for confirmation. If you plan to hold funds in a passphrase wallet, set it up and test access as described in the next section, then obtain the address from that wallet instead.

Once verified, the address can receive funds even when Safe 7 is switched off. Suite may offer a new Bitcoin address for each incoming payment; previous addresses still belong to you. See Trezor’s receiving guide for more detail.

Passphrase: how to create a separate wallet in Suite

A passphrase is an additional secret phrase that combines with your backup to open a separate wallet with its own addresses and balance. This feature is optional: you can use your Standard wallet without it. Before using a passphrase, verify your entire backup using the instructions below, since recovery requires both the backup and the passphrase.

For Safe 7, Suite accepts up to 128 ASCII characters: Latin letters, numbers, spaces and symbols. Capitalization and every space matter. A typo opens a different wallet, which will usually be empty. Choose a long, random phrase without names, quotations or predictable combinations: someone with a stolen backup can try to guess a weak passphrase.

Step 14. Enable passphrases in settings and confirm on Trezor

1. Connect and unlock Safe 7. Open Settings in Suite’s left sidebar, then select the Device tab at the top.
2. Scroll to Passphrase and turn on Use Passphrase wallets.
3. Safe 7 will display Passphrase settings / Turn on passphrase protection? Tap Confirm on the device.
4. After confirming, check that the toggle in Suite is on. Confirmation on Trezor completes activation of the feature.

Step 15. Open the wallet menu and select New passphrase

1. Click the arrow beside Trezor Safe 7 at the top left of Suite. The wallet menu will open with a Standard wallet card.
2. Click + Passphrase wallet, then select New passphrase in the expanded panel. Open previously used is for a wallet whose passphrase you have used before.
3. If Suite displays passphrase guidance, read it and click Got it. The Create your passphrase screen will open.

Step 16. Enter your passphrase and confirm it twice

1. On the Create your passphrase screen, you can type the phrase into Suite and click Confirm, or select Enter passphrase on Trezor and enter it on the device. We recommend entering it on Trezor to keep the phrase off your computer.
2. After entry, Safe 7 will ask you to check the phrase. On the screen reading The next screen shows your passphrase., tap Show passphrase, compare every character with your written copy and confirm on the device.
3. For a new wallet, Suite will display Confirm passphrase. Enter exactly the same phrase again in the app and click Confirm, or repeat the entry using Enter passphrase on Trezor.
4. Check the displayed phrase again and confirm it on Safe 7. If Passphrase mismatch appears, the two entries did not match: click Start over and repeat the process using your written copy.

Step 17. Check that your Passphrase wallet has opened

1. After successful confirmation, Suite will open the separate wallet. In our example, it is labeled Passphrase wallet #1 beneath the device name and in the wallet menu.
2. Expand the menu at the top left: you will see Standard wallet and Passphrase wallet #1. The selected card shows which wallet you are currently using.
3. A new passphrase wallet will have a zero balance. To receive funds into it, select it, open an account on the required network and follow Receive → Verify, as in steps 12–13. An address from your Standard wallet does not become an address for the new wallet.

Enabling passphrases does not move existing funds. To move coins from your Standard wallet, send a normal transaction to a verified address in the passphrase wallet and pay the network fee. First, test that you can reopen the new wallet.

How to test that you can reopen your passphrase wallet

1. In the passphrase wallet, open the first account for the coin you intend to use. Select Receive → Verify to display its first address on Safe 7, then record it along with the network name.
2. In the wallet menu at the top left, click the Eject icon on each of the two cards. This removes the wallets from Suite without wiping the device.
3. Reconnect and unlock Safe 7. Open the wallet menu and select + Passphrase wallet → Open previously used. Enter the phrase from your written copy and confirm on Trezor.
4. Open the same account and use Receive → Verify to compare its first address with the one you recorded. A match shows that your written passphrase opens the correct wallet. You can then test it with a small amount.

If you expected to see funds but the wallet is empty, check capitalization, spaces and whether the required network is enabled. Suite cannot tell whether you mistyped the phrase or opened a different empty wallet. To return to your standard wallet, select Standard wallet in the menu. See Trezor’s official passphrase wallet guide for more detail.

How to verify your wallet backup on Safe 7

The Check backup feature checks whether your written words match the wallet on the device without erasing it. Safe 7 can run this check on its own, without a connection to a phone or computer.

1. Turn on Safe 7 and unlock it with your PIN. Tap the home screen and open Settings → Security → Check backup.
2. On the Let’s do a wallet backup check screen, tap Continue and enter your PIN again on the device.
3. Select the number of words in your backup: 20 for the Single-share Backup created above. Tap Continue.
4. Enter the words in order on Safe 7’s keyboard, selecting the matching suggestions. Continue to the end of the list and wait for the result.
5. A successful check confirms that your written backup can recover this wallet. If the device reports an error, check the order and spelling, and make sure you are using the backup for this particular wallet. Do not reset the device or transfer your main balance until the check succeeds.

For a Multi-share Backup, enter enough distinct shares to meet the recovery threshold. Safe 7 keeps track of the shares while the check is in progress; exiting the check discards that progress. A backup check does not check your passphrase. Test access to a passphrase wallet separately.

How to send a test amount after funding your wallet

After checking your backup and receiving your first funds, you can test sending. If you use a passphrase wallet, open that wallet first. Allow for the recipient’s minimum deposit and the network fee so that your test payment can go through.

1. Open the deposit page on your exchange or the receiving address in another wallet you own, and select the network. Copy the address from that source, not from your transaction history. Record the memo or destination tag too, if required.
2. In Suite, open the account holding the funds you want to send and click Send. For a token, open that account’s Tokens tab and select the send button beside the token. Paste the address, enter a small amount and check the fee. If the recipient requires a memo or destination tag, enter it in the appropriate field.
3. Click Review & send. On Safe 7, compare the address with the one from the recipient’s original page, check the amount and fee, then sign the transaction on the device.
4. Return to Suite and click Send to broadcast the transaction. Wait for network confirmation and for the recipient to receive the funds.

This step takes place after funding the wallet; our illustrations show an empty test wallet. See the Suite sending guide for a full explanation of the form.

Using Safe 7 with a phone after setup

We used a computer to set up the device in this guide. Safe 7 also supports the Trezor Suite mobile app: on iPhone over Bluetooth, and on compatible Android phones over Bluetooth or USB-C. When connected to an iPhone, the USB-C port is used only for charging.

Install the mobile version of Suite using the link on Trezor’s official website. Connect your already configured Safe 7 and confirm the prompts on the device. If the app displays a Bluetooth pairing code, compare it on both screens. You do not need to create a new backup or enter your backup words on the phone. A passphrase wallet requires the same passphrase. See the official Safe 7 guide for the mobile connection procedure.

How to move a wallet from Safe 5 or Safe 3 to Safe 7

Restoring an existing backup gives Safe 7 access to the same wallet without making a blockchain transfer. The old and new devices, using the same backup, will both have access to the same funds. If someone else may have seen your backup words, create a new wallet with a new backup and transfer the coins. Restoring the old backup does not resolve that exposure.

1. Install firmware on your new Safe 7 and complete the authenticity check. At the wallet selection screen, choose Recover a wallet instead of creating a new one, then select Start recovery.
2. Accept the terms on Safe 7 by pressing and holding Hold to continue. Select the number of words in your backup and tap Continue.
3. Enter the words in order only on Safe 7’s keyboard, using the suggestions. For a Multi-share Backup, enter enough shares to meet the threshold. When finished, tap Continue and set a PIN.
4. In Suite, add the same networks and account types you used before. For a hidden wallet, enable passphrase wallets and open it with the same phrase. Compare the balance, history and address with the old device. Keep access to the old device until these checks are complete.

Safe 7 supports BIP39 and SLIP39 recovery; see Trezor’s official recovery instructions for details. Setting a new PIN does not change your wallet’s addresses.

Frequently asked questions

Is Trezor Safe 7 safe after the TROPIC01 vulnerability disclosure?

The published attack targets one chip and requires physical access, disassembly and specialist laboratory equipment. According to Trezor, even a successful compromise of TROPIC01 does not by itself expose the PIN, seed or funds, because two other independent protection layers remain. If a laboratory attack is a realistic concern for you, take the TROPIC01 vulnerability into account and use a strong passphrase stored separately from your backup.

Does Safe 7 work with iPhone?

Yes, through Bluetooth and the Trezor Suite mobile app. Safe 7 is the only current Trezor model that lets you sign transactions from an iPhone. When connected to an iPhone, USB-C is used only for charging.

Can I use Safe 7 without Bluetooth?

Yes. Disable Bluetooth in the settings and use USB-C with a computer or Android phone. You cannot sign transactions from an iPhone without Bluetooth.

What happens when the battery wears out?

If the battery no longer holds a charge, connect Safe 7 to a computer or Android phone by cable. The device will continue to work on USB-C power. Signing transactions from an iPhone still requires Bluetooth.

Is Safe 7 waterproof?

No. Its current IP54 rating covers limited dust protection and resistance to splashes. The device is not designed to be submerged, so use IP54 as your reference even if a review cites IP67.

Can I move my wallet from Safe 5 or Safe 3 to Safe 7?

Yes. Choose wallet recovery during Safe 7 setup and enter the words from your existing backup on the device’s screen. Safe 7 supports the same formats as Safe 3 and Safe 5. If you used a hidden wallet, you will also need the same passphrase. Once you have confirmed that recovery was successful, you can keep the old device as a backup or reset it to factory settings.

Does quantum-ready protect my bitcoin from quantum computers?

No. Safe 7’s post-quantum cryptography protects the boot process, firmware updates and device authentication. The quantum resistance of your coins depends on when and how their blockchains adopt post-quantum cryptography.

Further reading

• Best hardware wallets in 2026: which one should you choose? — a comparison of models from different manufacturers if you are still deciding on a device.
• How to store a seed phrase: 5 safe methods — how to choose a backup medium and store it securely.
• What is a seed phrase? — how recovery words relate to wallet access and what happens if you lose them.